On Tue, 2009-12-22 at 15:13 -0500, Dimitri Yioulos wrote: > On Tuesday 22 December 2009 3:03:48 pm John Horne > wrote: > > On Tue, 2009-12-22 at 14:16 -0500, Dimitri > Yioulos wrote: > > > All, > > > > > > The best of the holiday season to all! > > > > > > I'm working on a side project, and have > > > installed the latest RKH on an openSuse box. > > > By design, eth0 is in promiscuous mode, and > > > RKH picks up on this. I've edited > > > rkhunter.conf to allow this > > > (ALOWPROMISCIF="eth0"), then > > > > ^^^^^^^^^^^^^ > > > > This should have two 'L' in it - > > ALLOWPROMISCIF. > > > > > > > > John. > > > > -- > > John Horne, University of Plymouth, UK > > Tel: +44 (0)1752 587287 Fax: +44 (0)1752 > > 587001 > > > > > Er, sorry John, my poorly transposed spelling. It > does have 2 L's. > In which case I would next say look in the rkhunter log file to see if it says anything about this. If it is detecting the whitelisted interface then it should say so when the 'promisc' test runs.
John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 Fax: +44 (0)1752 587001 ------------------------------------------------------------------------------ This SF.Net email is sponsored by the Verizon Developer Community Take advantage of Verizon's best-in-class app development support A streamlined, 14 day to market process makes app distribution fast and easy Join now and get one step closer to millions of Verizon customers http://p.sf.net/sfu/verizon-dev2dev _______________________________________________ Rkhunter-users mailing list Rkhunter-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/rkhunter-users